Fix Semgrep CI: replace pipx with pip, bump to 1.113.0

Author: lauravoicu

.github/workflows/sast.yml

@@ -24,14 +24,10 @@ jobs:
       - name: Checkout
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
 
-      - name: Install pipx + Semgrep (pinned)
+      - name: Install Semgrep
         run: |
-          set -euxo pipefail
-          sudo apt-get update
-          sudo apt-get install -y pipx
-          pipx ensurepath
-          echo "$HOME/.local/bin" >> "$GITHUB_PATH"
-          pipx install semgrep==1.83.0
+          python3 -m pip install --upgrade pip setuptools
+          python3 -m pip install semgrep==1.113.0
           semgrep --version
 
       # Note: no --error flag; job will not fail on findings.